Online Access Free 250-614 Exam Questions

Which data elements are commonly reviewed during EDR investigations?
(Select all that apply)

• A.Process execution history
• B.Network connections
• C.File activity
• D.Policy assignment history

How does Application Control contribute to attack surface reduction?

• A.By encrypting endpoint traffic
• B.By managing device groups
• C.By allowing only authorized applications to run
• D.By updating malware signatures

What is the primary role of the Symantec Endpoint Security Complete cloud console?

• A.Replace on-premises directory services
• B.Perform local malware scanning on endpoints
• C.Centrally manage policies, devices, and security posture
• D.Act as a network firewall

Why is context important during EDR investigations?

• A.It limits alert visibility
• B.It helps distinguish benign from malicious activity
• C.It automates remediation
• D.It reduces storage needs

How are security policies applied to endpoints in SES Complete?

• A.Directly to individual users
• B.Automatically based on threat severity
• C.Through device groups
• D.Via manual endpoint configuration only